Split Tunneling Guide

Split tunneling is a powerful EdgeVPN feature that gives you precise control over which apps and services use the VPN connection and which bypass it. This guide explains how split tunneling works and how to configure it for your specific needs.

What is Split Tunneling?

Split tunneling allows you to selectively route internet traffic through your VPN tunnel or directly to the internet. Instead of forcing all your device's traffic through the VPN, you can choose which applications and services benefit from VPN protection while others connect normally.

Think of it as creating two separate internet pathways: one encrypted and routed through the VPN server, and another direct connection to the internet without VPN encryption.

How Split Tunneling Works

When split tunneling is configured:

1. Selected Apps: Chosen applications route traffic through the encrypted VPN tunnel
2. Other Apps: Remaining applications connect directly to the internet, bypassing the VPN
3. Simultaneous Connections: Both pathways operate at the same time
4. Dynamic Routing: Your device intelligently routes each app's traffic based on your configuration

This provides flexibility to balance security, speed, and functionality based on each app's specific requirements.

Benefits of Split Tunneling

Improved Speed for Local Services

Many local services work better with direct connections:

• Local network devices: Printers, smart home devices, local NAS storage
• Banking apps: Often detect and block VPN connections
• Payment services: Local payment apps may require your real location
• Streaming local channels: Domestic streaming services that require local IP addresses

By excluding these from the VPN, they work seamlessly while your other traffic remains protected.

Reduced Bandwidth Usage

VPN connections consume slightly more bandwidth due to encryption overhead. Split tunneling allows you to:

• Route bandwidth-intensive apps directly (video calls, streaming)
• Conserve VPN bandwidth for privacy-critical activities
• Optimize data usage on metered connections

Faster Performance for Speed-Sensitive Apps

Some applications require the lowest possible latency:

• Online gaming: Direct connections often provide better ping times
• Video conferencing: Zoom, Teams, and other video apps can bypass VPN for better quality
• Real-time trading platforms: Financial platforms that need instant execution

Access to Multiple Locations Simultaneously

Split tunneling enables interesting use cases:

• Access local and foreign content at the same time
• Use region-specific apps while browsing securely
• Work on local services while researching internationally

Better Compatibility

Some services actively detect and block VPN connections:

• Corporate VPN conflicts (use EdgeVPN for personal browsing while corporate VPN handles work traffic)
• Services with strict geo-restrictions
• Apps that malfunction when detecting VPN usage

Split Tunneling Modes

EdgeVPN offers two split tunneling modes:

Inclusive Mode (Only Selected Apps Use VPN)

How it works: Only apps you specifically select route through the VPN. Everything else connects directly.

Best for:

• Maximizing speed while protecting specific activities
• Torrenting specific apps only
• Browsing securely while accessing local services
• Testing VPN impact on specific apps

Example Configuration:

• Through VPN: Web browsers (Chrome, Firefox), torrent clients, messaging apps
• Direct: Gaming, video streaming, smart home apps, local utilities

Exclusive Mode (Selected Apps Bypass VPN)

How it works: All apps use the VPN except those you specifically exclude.

Best for:

• Maximum privacy with exceptions for problematic apps
• General VPN usage with specific local requirements
• Protecting most traffic while maintaining functionality

Example Configuration:

• Through VPN: All apps by default
• Direct: Banking apps, smart home controllers, local network tools, gaming

Recommendation: Exclusive mode is generally safer as it provides VPN protection by default, only bypassing VPN for apps that truly need it.

How to Enable Split Tunneling

Android Setup

1. Open EdgeVPN on your Android device
2. Tap the menu icon (three lines) and select Settings
3. Scroll to "Split Tunneling" or "App Management"
4. Toggle "Enable Split Tunneling" to ON
5. Choose your mode:
   • "Exclude apps from VPN" (Exclusive mode - most apps use VPN)
   • "Include only these apps" (Inclusive mode - only selected apps use VPN)
6. Tap "Select Apps"
7. Browse your installed apps and check the ones you want to include/exclude
8. Tap "Done" or "Save"
9. Reconnect to VPN for changes to take effect

Android Tip: You can search for apps using the search bar at the top of the app selection screen.

Windows Setup

1. Launch EdgeVPN on Windows
2. Click the Settings icon (gear symbol)
3. Navigate to "Connection" or "Advanced" tab
4. Find "Split Tunneling" section
5. Check "Enable Split Tunneling"
6. Select mode:
   • "Exclude from VPN": Selected apps bypass VPN
   • "Include in VPN": Only selected apps use VPN
7. Click "Add Application"
8. Browse to executable files (.exe) or select from running programs
9. Add all desired applications
10. Click "Apply" or "Save"
11. Reconnect to VPN

Windows Tip: You can add applications by browsing to their .exe file location (usually in C:\Program Files\ or C:\Program Files (x86)).

macOS Setup

1. Open EdgeVPN on your Mac
2. Click the EdgeVPN icon in the menu bar
3. Select "Preferences" or "Settings"
4. Go to "Connection" or "Advanced" tab
5. Enable "Split Tunneling"
6. Choose mode: Exclude or Include
7. Click the "+" button to add applications
8. Navigate to Applications folder and select apps
9. Add all desired applications to the list
10. Close settings (changes save automatically)
11. Reconnect to VPN

macOS Tip: Most apps are in /Applications, but some utilities are in /Applications/Utilities.

iOS Limitations

Important: iOS does not support app-level split tunneling due to Apple's operating system restrictions. All traffic must go through the VPN or none of it does.

Alternative: You can enable/disable the VPN connection entirely or use per-website split tunneling in Safari through DNS configurations (advanced).

Linux Setup

1. Open EdgeVPN terminal or GUI
2. Edit configuration file: nano ~/.config/edgevpn/split-tunneling.conf
3. Add app rules in format: exclude:firefox or include:chrome
4. Save and exit
5. Restart EdgeVPN: systemctl restart edgevpn

Linux CLI Method:

edgevpn split-tunneling --mode exclude --add firefox
edgevpn split-tunneling --mode exclude --add steam
edgevpn split-tunneling enable

Common Split Tunneling Configurations

Here are popular setups for different use cases:

Configuration 1: Privacy-Focused with Local Exceptions

Mode: Exclusive (all apps use VPN except selected)

Exclude from VPN:

• Banking apps (Chase, Bank of America, PayPal)
• Smart home apps (Google Home, Alexa, Ring)
• Local network tools (printer apps, file sharing)
• Gaming platforms (Steam, Epic Games, Battle.net)

Result: Maximum privacy for browsing, messaging, and general internet use, while maintaining functionality for local and regional services.

Configuration 2: Torrenting Protection

Mode: Inclusive (only selected apps use VPN)

Include in VPN:

• Torrent clients (qBittorrent, Transmission, uTorrent)
• Web browsers (for searching torrents)
• Usenet clients
• Media managers (Sonarr, Radarr)

Result: Your torrent traffic is protected and your ISP cannot see your P2P activity, while other apps maintain maximum speed.

Configuration 3: Streaming Optimization

Mode: Exclusive (all apps use VPN except selected)

Exclude from VPN:

• Video streaming apps with good local libraries (Netflix, Disney+, local channels)
• Video conferencing (Zoom, Teams, Google Meet)
• Cloud gaming (GeForce Now, Xbox Cloud Gaming)

Result: Secure browsing and data protection, with maximum streaming and conferencing quality.

Configuration 4: Work-Life Balance

Mode: Inclusive (only selected apps use VPN)

Include in VPN:

• Personal browsers (Chrome, Firefox for personal use)
• Personal messaging (WhatsApp, Telegram)
• Entertainment apps (YouTube, Twitter)

Result: Personal activities protected by EdgeVPN, while work apps use corporate VPN or direct connections as required by your employer.

Configuration 5: Gaming & Streaming

Mode: Inclusive (only selected apps use VPN)

Include in VPN:

• Web browsers (for general browsing)
• Torrent clients
• Social media apps

Exclude (Direct Connection):

• All games (automatic - not selected)
• Streaming services (automatic - not selected)

Result: Low-latency gaming and high-quality streaming, with secure web browsing.

Advanced Split Tunneling: Website-Based Rules

Some EdgeVPN versions support domain-based split tunneling (Windows/Android):

How to Configure Website Rules

1. Open Split Tunneling settings in EdgeVPN
2. Switch to "Websites" or "Domains" tab
3. Add domains you want to route differently:
   • exclude:facebook.com (access Facebook without VPN)
   • include:torrentsite.com (only torrent sites through VPN)
4. Save and reconnect

Use Cases:

• Access local news sites that block VPN traffic
• Route specific streaming domains through VPN for geo-unblocking
• Exclude banking websites while protecting everything else

Testing Your Split Tunneling Configuration

Verify your split tunneling is working correctly:

Test Method 1: IP Address Check

1. Connect to EdgeVPN with split tunneling enabled
2. Open a browser (if included in VPN)
3. Visit whatismyip.com - should show VPN IP
4. Open an excluded app's browser (if any)
5. Visit whatismyip.com - should show real IP

Test Method 2: Speed Comparison

1. Run speed test in VPN-enabled browser: speedtest.net
2. Run speed test in direct-connection app
3. Direct connection should show faster speeds

Test Method 3: Network Monitoring

Windows: Use Resource Monitor (resmon.exe) > Network tab to see which apps use which IPs

macOS: Use Activity Monitor > Network to observe connections

Linux: Use nethogs or iftop to monitor per-app network usage

Troubleshooting Split Tunneling

Apps Still Using VPN When They Shouldn't

Problem: App bypass rules not working.

Solution:

1. Verify correct mode (Inclusive vs Exclusive)
2. Restart the app after applying split tunneling rules
3. Reconnect to VPN after changing rules
4. Check app name matches exactly (some apps have multiple processes)

Apps Not Working When Split Tunneling Is Enabled

Problem: Routing conflicts or DNS issues.

Solution:

1. Clear app cache and restart
2. Try switching mode (Inclusive ↔ Exclusive)
3. Temporarily disable split tunneling to confirm it's the cause
4. Check for DNS leaks at dnsleaktest.com

Some Websites Don't Load

Problem: Split tunneling affecting browser's sub-processes.

Solution:

1. Include/exclude entire browser rather than individual tabs
2. Clear browser cache and restart
3. Disable browser extensions that might interfere with routing

Games Show Wrong Region

Problem: Gaming platform using VPN despite being excluded.

Solution:

1. Exclude game launcher (Steam, Epic, Battle.net)
2. Exclude individual games (browse to .exe files)
3. Restart launcher after applying changes

Security Considerations

While split tunneling provides flexibility, be aware of security implications:

Potential Risks

IP Address Exposure: Excluded apps reveal your real IP address DNS Leaks: Excluded apps may use ISP DNS servers Fingerprinting: Different apps showing different locations can be used to fingerprint you Partial Protection: Only VPN-routed traffic is encrypted

Best Practices

1. Only exclude apps that truly need it: Default to VPN protection
2. Don't exclude privacy-sensitive apps: Browsers, messaging, email should use VPN
3. Review configuration regularly: Remove exclusions you no longer need
4. Use Exclusive mode: Safer default (VPN for everything except exclusions)
5. Enable kill switch: Prevents leaks if VPN drops, even with split tunneling
6. Test thoroughly: Verify your configuration works as intended

When NOT to Use Split Tunneling

Avoid split tunneling in these scenarios:

• High-security activities: Whistleblowing, activism, sensitive journalism
• Countries with strict VPN laws: Simplify setup and reduce detection vectors
• Public Wi-Fi: Use full VPN protection on untrusted networks
• Torrenting multiple apps: Better to route everything through VPN
• When simplicity is priority: Added complexity can lead to misconfigurations

Frequently Asked Questions

Does split tunneling reduce VPN security? Only for apps that bypass the VPN. Apps routed through the VPN remain fully protected.

Can I use split tunneling with kill switch? Yes. The kill switch will block excluded apps if the VPN drops, preventing IP leaks.

Will split tunneling improve my speed? Yes, for apps that bypass the VPN. Those apps connect directly at full ISP speeds.

Can I split tunnel on a per-website basis? On some platforms (Windows, Android), yes. This is a more advanced feature.

How many apps can I add to split tunneling? There's no practical limit. You can add as many apps as needed.

Does split tunneling work with all protocols? Yes. Split tunneling works with WireGuard, OpenVPN, and V2Ray.

Split tunneling gives you granular control over your VPN connection, allowing you to balance privacy, performance, and functionality based on your specific needs. By carefully configuring which apps use the VPN, you can create an optimal setup that protects your privacy without sacrificing the performance or features you need for specific applications.